Re: PROPOSAL: GPG Signing of Releases

From: Brian W. Fitzpatrick <fitz_at_red-bean.com>
Date: 2004-04-09 05:48:34 CEST

On Apr 8, 2004, at 2:55 PM, kfogel@collab.net wrote:

> Okay. My feeling, after reading the whole thread, is that we should
>
> a) Forget about the shared key for now.
>
> b) Make sure that three or four developers sign each release.
>
> c) Make an effort to get all developer's keys into well-connected
> trust networks (pretty easy, considering that we have a high
> degree of personal contact/overlap with other projects like
> Debian, Apache, etc).

<snip>

> So, how do people feel about this simplified version of Ben Reser's
> proposal?

+1!

-Fitz

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Fri Apr 9 05:49:09 2004

This message: [ Message body ]
Next message: James Dunne: "SVN reads passwd file regardless of connection mode (SSH)"
Previous message: 张建春: "How I get Repository file list which contain a Non-ascii file name."
In reply to: kfogel_at_collab.net: "Re: PROPOSAL: GPG Signing of Releases"
Next in thread: Sander Striker: "Re: PROPOSAL: GPG Signing of Releases"
Reply: Sander Striker: "Re: PROPOSAL: GPG Signing of Releases"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]